This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/zNU6IDjxCzR9kstGaRPoOLdFKys.roa File: zNU6IDjxCzR9kstGaRPoOLdFKys.roa (raw, json) Hash identifier: /0Ll+33Qv6p8kiSxadN/S3UUnMBmdYJpGWJ0vqXCXNI= Subject key identifier: CC:D5:3A:20:38:F1:0B:34:7D:92:CB:46:69:13:E8:38:B7:45:2B:2B Certificate issuer: /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787 Certificate serial: 019B7C80672D1889192656821FD9A6264C79 Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/zNU6IDjxCzR9kstGaRPoOLdFKys.roa Signing time: Fri 02 Jan 2026 02:19:08 +0000 ROA not before: Fri 02 Jan 2026 02:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25454 IP address blocks: 46.166.0.0/18 maxlen: 24 77.89.192.0/18 maxlen: 24 94.243.64.0/18 maxlen: 24 185.8.68.0/22 maxlen: 22 185.8.68.0/23 maxlen: 23 185.8.68.0/24 maxlen: 24 185.8.69.0/24 maxlen: 24 185.167.132.0/22 maxlen: 24 188.131.0.0/17 maxlen: 24 193.239.182.0/23 maxlen: 24 195.22.224.0/19 maxlen: 24 212.56.192.0/19 maxlen: 24 217.12.112.0/20 maxlen: 24 217.12.126.0/24 maxlen: 24 2a00:1858::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:67:2d:18:89:19:26:56:82:1f:d9:a6:26:4c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787 Validity Not Before: Jan 2 02:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccd53a2038f10b347d92cb466913e838b7452b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:28:9b:c3:6b:3b:1c:b9:1c:85:02:80:e5:c6: 2f:55:83:d7:7e:05:35:fa:cc:68:65:ec:e2:0f:5f: 3f:9f:00:c3:32:a8:7d:81:1e:48:92:b7:76:8b:ee: ed:5f:84:49:2c:4e:41:ac:d1:84:d2:2b:13:8a:63: bc:4a:c8:9a:5e:f8:f8:4c:29:8b:ac:d0:25:8c:63: 53:a1:3b:02:3d:ce:cd:d6:d0:3f:14:df:93:23:b4: 23:b4:fc:95:1f:1d:fb:31:8d:19:0e:0d:6f:78:2b: 52:14:bc:bd:41:08:83:3d:c0:6d:34:8b:66:21:aa: d7:2f:e8:54:59:bc:a8:4d:28:62:02:f8:df:4d:3c: f1:1a:b8:8a:37:49:94:41:c2:86:82:b7:83:61:ac: 67:cd:6d:8c:f6:69:95:6c:5b:b9:48:4a:da:af:8c: 9a:56:5d:c7:c1:ab:5f:eb:f0:b6:3d:3c:1a:79:78: 41:e5:c8:1c:67:31:da:13:c1:83:6c:3f:02:8b:99: db:a2:d6:2e:40:34:75:d4:d6:f6:99:c0:f0:ca:62: 60:30:13:77:fa:7a:d4:a3:f9:f9:84:fb:e3:ed:56: 14:ea:64:77:b9:c3:06:49:46:86:30:4b:c9:ab:1e: 95:ac:de:77:4c:31:80:6f:6e:d4:f6:d9:0a:7d:d8: 7a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D5:3A:20:38:F1:0B:34:7D:92:CB:46:69:13:E8:38:B7:45:2B:2B X509v3 Authority Key Identifier: keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/zNU6IDjxCzR9kstGaRPoOLdFKys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.166.0.0/18 77.89.192.0/18 94.243.64.0/18 185.8.68.0/22 185.167.132.0/22 188.131.0.0/17 193.239.182.0/23 195.22.224.0/19 212.56.192.0/19 217.12.112.0/20 IPv6: 2a00:1858::/32 Signature Algorithm: sha256WithRSAEncryption 04:3d:cb:c8:ae:2c:f8:b0:56:a5:ab:c2:ea:c7:59:db:7e:50: 02:8a:a9:3a:ca:3d:a3:54:58:26:18:ea:59:6e:a8:43:f6:77: 1d:bb:bb:c4:42:a1:39:6a:da:f3:b7:88:8a:2a:5e:fe:c3:7d: 1b:c4:0a:74:56:81:78:c3:60:11:15:a9:0c:f1:85:1e:d0:90: 81:1c:f9:48:dd:f4:99:eb:66:ed:ec:2d:35:00:14:c1:c4:5d: 4c:d4:a1:de:d4:d4:c9:3a:0c:28:71:44:95:61:fd:f8:6e:9a: 06:d6:f4:53:ca:1f:ec:f5:b8:14:47:2b:fd:b2:9e:53:5d:cd: b9:55:62:05:e2:bd:11:e4:fd:83:33:ce:18:02:d0:8f:b0:ba: 9e:8f:a5:6d:7c:f3:2a:22:ed:d5:54:ab:d6:f8:b4:85:b2:34: 67:a3:dc:20:7e:03:fb:97:53:50:b4:15:b9:5d:e5:66:e5:02: 14:63:05:10:16:e6:99:66:48:7c:58:73:d6:9b:0c:99:8d:fe: e1:ce:da:58:2c:94:ad:28:dc:7e:da:e0:f9:f5:ce:7a:42:e9: c4:e4:09:69:41:8c:28:b4:8c:e5:0d:23:e5:b7:4b:84:88:56: ab:ed:ed:df:dd:eb:0e:a3:5b:c5:ab:98:2e:d7:29:eb:50:8e: 91:70:e6:71 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt8gGctGIkZJlaCH9mmJkx5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwM2MzMDJjMmY1MjI3N2UzZDBhYjY4NDJmNjhhYTVmOGQw ZDc3ODcwHhcNMjYwMTAyMDIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2Q1M2EyMDM4ZjEwYjM0N2Q5MmNiNDY2OTEzZTgzOGI3NDUyYjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyibw2s7HLkchQKA5cYvVYPXfgU1 +sxoZeziD18/nwDDMqh9gR5Ikrd2i+7tX4RJLE5BrNGE0isTimO8SsiaXvj4TCmL rNAljGNToTsCPc7N1tA/FN+TI7QjtPyVHx37MY0ZDg1veCtSFLy9QQiDPcBtNItm IarXL+hUWbyoTShiAvjfTTzxGriKN0mUQcKGgreDYaxnzW2M9mmVbFu5SErar4ya Vl3Hwatf6/C2PTwaeXhB5cgcZzHaE8GDbD8Ci5nbotYuQDR11Nb2mcDwymJgMBN3 +nrUo/n5hPvj7VYU6mR3ucMGSUaGMEvJqx6VrN53TDGAb27U9tkKfdh6cwIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFMzVOiA48Qs0fZLLRmkT6Di3RSsrMB8GA1UdIwQY MBaAFLA8MCwvUid+PQq2hC9oql+NDXeHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2Et NmY3MDI0YzNhYWQ3LzEvek5VNklEanhDelI5a3N0R2FSUG9PTGRGS3lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2EtNmY3MDI0YzNhYWQ3 LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQGLqYAAwQG TVnAAwQGXvNAAwQCuQhEAwQCuaeEAwQHvIMAAwQBwe+2AwQFwxbgAwQF1DjAAwQE 2QxwMA0EAgACMAcDBQAqABhYMA0GCSqGSIb3DQEBCwUAA4IBAQAEPcvIriz4sFal q8Lqx1nbflACiqk6yj2jVFgmGOpZbqhD9ncdu7vEQqE5atrzt4iKKl7+w30bxAp0 VoF4w2ARFakM8YUe0JCBHPlI3fSZ62bt7C01ABTBxF1M1KHe1NTJOgwocUSVYf34 bpoG1vRTyh/s9bgURyv9sp5TXc25VWIF4r0R5P2DM84YAtCPsLqej6VtfPMqIu3V VKvW+LSFsjRno9wgfgP7l1NQtBW5XeVm5QIUYwUQFuaZZkh8WHPWmwyZjf7hztpY LJStKNx+2uD59c56QunE5AlpQYwotIzlDSPlt0uEiFar7e3f3esOo1vFq5gu1ynr UI6RcOZx -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:28 2026 by rpki-client